THE ROLE OF RISK MANAGEMENT IN IMPROVING THE CYBER RESILIENCE OF AN ORGANISATION IN THE CONTEXT OF HYBRID THREATS

Abstract

The article provides a comprehensive study of the role of risk management in ensuring the cyber resilience of an organisation in the context of intensifying hybrid threats that combine cybernetic, informational-psychological, organisational and technological influences. The relevance of the study is due to the increasing complexity of the modern security environment, in which traditional approaches to cybersecurity are proving insufficiently effective without taking into account systemic risks and uncertainties. The paper analyses the essence of hybrid threats and hybrid influences, identifies their key characteristics, mechanisms of implementation and consequences for the functioning of the information infrastructure of organisations. Particular attention is paid to the impact of such threats on critical information resources, business processes and business continuity. It summarises current scientific approaches to cyber risk management, including standardised and adaptive models used in international practice. The main elements of a risk-oriented approach to ensuring cyber resilience are considered, including threat identification, assessment of the probability and potential consequences of risks, prioritisation of responses, and monitoring and review of the organisation's risk profile. The possibilities of integrating risk management into the overall system of cybersecurity management, corporate governance, and strategic planning are analysed. The advantages of applying a risk-oriented approach compared to fragmented or reactive protection measures are demonstrated. The article proposes a model for improving the cyber resilience of an organisation by optimising risk management processes, which involves coordinating technical, organisational and managerial measures, raising staff awareness and developing a risk management culture. The results of the study show that effective and systematic implementation of risk management is a basic condition for forming an organisational structure that is resistant to hybrid threats, ensuring the security of critical information resources and increasing the adaptability of organisations to the dynamic challenges of the modern cyberspace.